Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9020c795-d0d1-3a23-b4c2-0148d0ec2dcf.roa
File:                     9020c795-d0d1-3a23-b4c2-0148d0ec2dcf.roa (raw, json)
Hash identifier:          xlBETsW+CGFdnEFmEDKlBV+dPaZwkYLbaxK/6aevPrg=
Subject key identifier:   2D:0C:A0:67:33:B2:E4:EA:54:81:2E:1C:A4:43:86:22:1F:66:7D:34
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F067266B29A65F1DA55E9F380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9020c795-d0d1-3a23-b4c2-0148d0ec2dcf.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     22394
IP address blocks:        2001:4888:8010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:66:b2:9a:65:f1:da:55:e9:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=39a3333f-c565-44b9-8eb9-2c22339cb3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a4:89:61:a0:a1:5a:39:3b:69:99:98:07:2a:
                    e6:62:d0:83:28:66:29:31:b0:80:61:50:44:b6:ee:
                    93:39:91:6e:45:aa:40:b6:fb:4c:fe:19:3c:20:45:
                    e2:5d:61:8f:a2:77:1c:ff:f6:a0:ca:31:2d:b7:14:
                    b6:06:7f:a4:90:69:79:b3:18:8e:ae:6a:ac:bc:a8:
                    e4:be:7c:c2:3c:f7:fa:1d:e0:31:38:98:3c:66:06:
                    20:97:4a:da:48:ee:62:57:4a:bd:c8:23:a9:56:7a:
                    1f:24:31:6e:cf:bf:ff:9c:a7:91:53:a7:e1:d6:31:
                    7e:a8:29:da:e8:a5:d7:f7:30:ad:43:25:5b:3e:e4:
                    a0:c3:4c:9a:75:32:04:87:1d:cc:83:14:57:fa:28:
                    f1:aa:52:06:d0:cf:8c:22:2b:50:76:49:b7:8f:57:
                    7f:6e:2e:f7:23:76:3d:d4:7e:0c:f3:ab:d7:ca:76:
                    13:6b:ca:e8:92:84:09:9e:24:94:88:5f:4d:dd:aa:
                    3a:3b:40:d2:b8:31:f3:3d:81:aa:de:96:7f:51:29:
                    9d:16:b0:9d:e7:20:82:b3:99:72:fb:03:02:6d:93:
                    ab:16:92:47:e4:9c:d5:cc:3a:42:d4:ea:a3:20:40:
                    1f:4d:c4:c2:8a:77:33:a6:03:3f:6b:06:df:5c:80:
                    46:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0C:A0:67:33:B2:E4:EA:54:81:2E:1C:A4:43:86:22:1F:66:7D:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9020c795-d0d1-3a23-b4c2-0148d0ec2dcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ca:df:29:a6:22:1e:55:0b:bc:83:65:b5:14:0c:2e:59:14:
         fe:65:09:d1:df:db:55:da:93:7f:a7:1a:20:50:4e:f4:c0:29:
         2e:8b:45:86:9d:c3:fd:9c:41:5e:f5:6d:a0:d4:53:7e:7a:52:
         37:f9:30:8e:49:1b:a3:27:68:32:49:51:40:9d:7b:55:1d:bd:
         37:2c:5e:2a:bb:09:8f:19:ae:7d:ff:f5:23:05:4e:ff:24:bf:
         7d:53:58:9d:88:14:04:8d:90:09:9d:dc:e1:a5:1b:19:28:da:
         48:5d:b6:65:2c:c7:bd:80:83:fa:28:ba:66:27:1a:95:1d:7d:
         39:14:ff:90:43:1b:6a:1d:9f:47:ab:02:12:e9:b2:f1:3d:df:
         74:62:43:f6:a6:33:06:4a:a5:34:6d:30:d6:e8:68:1b:45:32:
         0c:6e:57:6f:7e:6b:92:3e:dd:90:40:15:db:a8:66:7a:08:1a:
         90:d0:da:ac:1b:4b:92:2b:9a:9a:b8:36:7a:9e:6b:39:64:87:
         9d:e6:f7:58:8a:29:e8:99:01:ac:da:3b:13:96:bf:66:6c:03:
         b5:87:f8:6d:62:cb:5a:be:21:68:1e:00:fc:bf:ed:64:34:cf:
         29:21:91:fa:a8:10:d4:85:c3:30:1f:f2:37:03:6b:94:ce:c6:
         6b:77:11:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:45:58 2026 by rpki-client